SakuraaModLoader2[.]dll | Triage

Sharing

General

Target

SakuraaModLoader2.dll
Size

12.7MB
MD5

d5797be7c95059877837efe7b1fb0074
SHA1

f575862c80616af6006264d91ca92669a785bd0b
SHA256

dc8a45d8f09dd0bf3ca3a6fec5b0d606639bdd80e3949cdff0564b38db8f2928
SHA512

bb2f2b9a763e523cda513df87c2e241c9c1ead7236fff9c9d7546780a3e98a7fae5b11780f2527410cf82cedf187bad98c1860ef956beba585e67492778702b9
SSDEEP

196608:nhjcPCbE9eFxg1q7jG4VP5uM2ykool86BNUQsWP+r+HNX2Hwmqcf5:nppE9oa1qe4VP5d2D8ORsqkf5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SakuraaModLoader2.dll

Files

SakuraaModLoader2.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12.7MB - Virtual size: 12.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ